SCRAM-SASL

[Neustradamus]

Dear @modern-email team (@epilys, @duesee, @mjl-, ...),

Thanks for your work! :)

I have discovered that there are several missing parts about SCRAM-SASL:

• https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism

Example for Cypht, Cyrus, Dovecot, Exim, SnappyMail:

• https://implementations.modernemail.org/#feats=sasl
• https://implementations.modernemail.org/#feats=scram
• https://implementations.modernemail.org/
• https://github.com/modern-email/implementations

@cypht-org (@marclaporte, @Danelif, @Shadow243, @josaphatim, @kroky, ...):

• 💬 [Question] implementations.modernemail.org cypht-org/cypht#1519

@cyrusimap + sasl (@ksmurchison, @brong, @rsto, @marclaporte, @dilyanpalauzov, @rjbs, @wolfsage, @quanah, @hyc, @elliefm, @bgermann):

• implementations.modernemail.org cyrusimap/cyrus-imapd#5443

@dovecot (@sirainen, @stephanbosch, @cmouse, @mbettini-ox, ...): Dovecot 2.4.0 supports now -PLUS variants:

• https://dovecot.org/mailman3/archives/list/dovecot-news@dovecot.org/thread/UYNR6GBP25XEGFCS633SWPR4HXV3NSS3/

@Exim (@HeikoSchlittermann, @mrballcb, @j47997, ...):

• https://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_gsasl_authenticator.html
• https://exim.org/exim-html-4.93/doc/html/spec_html/ch-the_gsasl_authenticator.html

SnappyMail (@the-djmaze):

• implementations.modernemail.org the-djmaze/snappymail#1960

Notes:

• Several implementations.modernemail.org listed projects use Dovecot, Cyrus-SASL/Cyrus-IMAPD, GSASL (GNU SASL), ...
• @marlam projects are missing: https://github.com/marlam/mpop + https://github.com/marlam/msmtp

Thanks in advance.

Linked to:

• State of Play scram-sasl/info#1

cc: @aamelnikov.